2 September 2010

IOS: Reverse SSH Console Access – Part 2

Accessing the line port using SSH only.

The advantage to this option is that you need only allow TCP 22 (SSH) through your firewall.

From a *nix platform, you use the following command line:

ssh gf:39@10.216.4.10

When using putty in interactive mode, at the username prompt just put username:number at the prompt.

Putty Profile

If you configure putty profiles (which I use to run putty from the command line).

putty ssh selecta.jpg

Connecting from the IOS prompt on your terminal server

Accessing a port on your terminal server using the IOS command line, where 40 is the line number of the serial port that you want connect to.

lontrm01#ssh -l gf:40 10.216.4.10

{Thanks to Emanuele who posted a comment on the original post}

HELP: How do you enter Break Characters to enter ROMMON ?

I have not been able to successfully enter a break character / sequence to break into the boot sequence when using Reverse SSH. From my research, it seems that the break characters when using SSH are different from those using telnet.

I am sure that there is an answer – please leave a comment if you have any tips.

List of Standard Break Keys

Please rate this post:

1 Star - It\\\'s Crud2 Stars - It\\\'s Tosh3 Stars - Something\\\'s missing4 Stars - Needs works5 Stars - Good Enough6 Stars - Good7 Stars - Excellent8 Stars - Brilliant9 Stars - Astonishing10 Stars - Awesomely Godlike? (No Ratings Yet)
Loading ... Loading ...

About Greg Ferro
Greg is a Network and Security Architect / Designer / Engineer working freelance in the UK and worked for Resellers, DotCom's, Large Corporate's and Service Providers across a variety of products & Vendors. He prefers to work for end users, believes in the life cycle, total cost of ownership and that near enough is often good enough. He likes talking about himself in the first person to feel "royal", even when hosting the Packet Pushers Podcast on Data Networking. More about Greg at http://etherealmind.com/who-am-i/ and you can follow him on Twitter.

Comments

  1. Emanuele says:

    Hi Greg,
    I think there is no standard key. On openssh using ~B you ask to remote server to send a BREAK to remote server. But I’m not sure SSHv2 on cisco implement this. I’ve nothing connected to the only reverse SSH box I have, so I can’t test.. :)
    And I see no telnet break-on-ip or ip-on-break for ssh.. :-/

    • Greg Ferro says:

      I tried ~B on OSX Terminal but it didn’t work. I also activated the ‘telnet -on-break’ but it didn’t work either. The only way I got it to work was to remove the line from the rotary group, telnet (not SSH) as normal, connect a windows keyboard, and open a windows terminal emulator in Parallels. Which isn’t really very good.

  2. Rob says:
  3. Rob says:

    Sorry I meant to type “ip ssh break-string” command in the previous post

Speak Your Mind

*